Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'ACQUISIT' = '%HOMEPATH%\Grasscha9\brnefo.vbs'
- iexplore.exe
- %HOMEPATH%\grasscha9\brnefo.scr
- %HOMEPATH%\grasscha9\brnefo.vbs
- 'fm#######ics-my.sharepoint.com':443
- DNS ASK fm#######ics-my.sharepoint.com
- '%HOMEPATH%\grasscha9\brnefo.scr' /S
- '%ProgramFiles(x86)%\internet explorer\iexplore.exe'